A Novel Security Index for Assessing Information Systems in Industrial Organizations Using Web Technologies and Fuzzy Logic ^†

Industrial information systems based on web technologies (ISOWT) face escalating security challenges, particularly in critical sectors such as energy. Traditional qualitative security assessments often lack the ability to deliver actionable, real-time insights for managing complex, dynamic threats. This paper proposes a novel security index for evaluating ISOWT in industrial organizations by integrating fuzzy logic, metric-based evaluation, fuzzy Markov chains, and multi-agent systems. The proposed index quantifies deviations from an ideal “center of safety,” enabling early risk detection and proactive mitigation. The methodology is validated through two real-world case studies on Syria’s energy sector, namely the Ministry of Electricity website and Mahrukat fuel management system. Experimental results demonstrate substantial improvements, including a 45.9–58.5% increase in security index, 56.9–60.3% reduction in page load times, and 78.3–82.4% decrease in detected vulnerabilities. Comparative analysis shows that the proposed approach outperforms existing methods in terms of quantitative precision, real-time monitoring, and predictive capabilities. The proposed framework is scalable, automated, and adaptable, addressing key limitations of existing ISOWT security assessment techniques and providing a robust tool for enhancing system resilience. Its flexibility enable applicability across diverse industrial domains, contributing to advanced cybersecurity practices for critical infrastructure. Future work will focus on integrating advanced technologies, expanding the framework to additional sectors, developing adaptive fuzzy models, accounting for human factors, and improving visualization techniques to further address the evolving security challenges faced by industrial organizations.